X-Git-Url: https://git.saurik.com/apple/network_cmds.git/blobdiff_plain/07f470571f6fc2709bdcf62fad0e6c4c1bf4e1b9..44bd3e4da82664508ce0e5aea495c41bda73e120:/ipfw.tproj/ipfw.8 diff --git a/ipfw.tproj/ipfw.8 b/ipfw.tproj/ipfw.8 index 71f6bec..4136a3f 100644 --- a/ipfw.tproj/ipfw.8 +++ b/ipfw.tproj/ipfw.8 @@ -7,6 +7,7 @@ .Sh NAME .Nm ipfw .Nd IP firewall and traffic shaper control program +(DEPRECATED) .Sh SYNOPSIS .Nm .Op Fl cq @@ -63,38 +64,19 @@ .Oc .Ar pathname .Sh DESCRIPTION +Note that use of this utility is +.Cm DEPRECATED. +Please use +.Xr pfctl 8 +instead. +.Pp The .Nm utility is the user interface for controlling the .Xr ipfw 4 firewall and the .Xr dummynet 4 -traffic shaper in -.Fx . -.Pp -.Bd -ragged -offset XXXX -.Em NOTE: -this manual page documents the newer version of -.Nm -introduced in -.Fx -CURRENT in July 2002, also known as -.Nm ipfw2 . -.Nm ipfw2 -is a superset of the old firewall, -.Nm ipfw1 . -The differences between the two are listed in Section -.Sx IPFW2 ENHANCEMENTS , -which you are encouraged to read to revise older rulesets and possibly -write them more efficiently. -See Section -.Sx USING IPFW2 IN FreeBSD-STABLE -for instructions on how to run -.Nm ipfw2 -on -.Fx -STABLE. -.Ed +traffic shaper. .Pp An .Nm @@ -1584,31 +1566,10 @@ to circumvent firewalls. When logging is enabled, these packets are reported as being dropped by rule -1. .It -If you are logged in over a network, loading the -.Xr kld 4 -version of -.Nm -is probably not as straightforward as you would think. -I recommend the following command line: -.Bd -literal -offset indent -kldload ipfw && \e -ipfw add 32000 allow ip from any to any -.Ed -.Pp -Along the same lines, doing an -.Bd -literal -offset indent -ipfw flush -.Ed -.Pp -in similar surroundings is also a bad idea. -.It The .Nm filter list may not be modified if the system security level -is set to 3 or higher -(see -.Xr init 8 -for information on system security levels). +is set to 3 or higher. .El .Sh PACKET DIVERSION A @@ -1724,27 +1685,6 @@ Controls whether bridged packets are passed to .Nm . Default is no. .El -.Sh USING IPFW2 IN FreeBSD-STABLE -.Nm ipfw2 -is standard in -.Fx -CURRENT, whereas -.Fx -STABLE still uses -.Nm ipfw1 -unless the kernel is compiled with -.Cm options IPFW2 , -and -.Nm /sbin/ipfw -and -.Nm /usr/lib/libalias -are recompiled with -.Cm -DIPFW2 -and reinstalled (the same effect can be achieved by adding -.Cm IPFW2=TRUE -to -.Nm /etc/make.conf -before a buildworld). .Pp .Sh IPFW2 ENHANCEMENTS This Section lists the features that have been introduced in @@ -2103,15 +2043,12 @@ the sleep terminates thus restoring the previous situation. .Sh SEE ALSO .Xr cpp 1 , .Xr m4 1 , -.Xr bridge 4 , .Xr divert 4 , .Xr dummynet 4 , .Xr ip 4 , .Xr ipfirewall 4 , .Xr protocols 5 , .Xr services 5 , -.Xr init 8 , -.Xr kldload 8 , .Xr reboot 8 , .Xr sysctl 8 , .Xr syslogd 8